Could Nick Andersen’s leadership outlast the clock on his acting role?
The clock is running out on Nick Andersen’s time to serve as acting director of the Cybersecurity and Infrastructure Security Agency, but there appear to…
Latest Cybersecurity News — Page 12
View all →
Cursor removes malicious Claude Code extension after SSH backdoor attempt
“An extension marketplace is effectively another software supply chain,” Kadakia said. “When malicious code can reach developers through what appears to be a legitimate, routine…
ODVA’s CIP Security achieves TÜV Rheinland certification against IEC 62443-4-2 at Security Level 3
ODVA announced that CIP Security has been formally certified by TÜV Rheinland to meet the applicable requirements of IEC 62443-4-2 at Security Level Capability 3…
Lumen details Volt Typhoon’s Silent Train framework exploiting zero-days to target US critical infrastructure sites
New research from Lumen Technologies’ Black Lotus Labs detailed how China-linked cyber threat group Volt Typhoon used a covert operational framework, dubbed Silent Train, to…
Wiz introduces Dangling Domain Detection to help you prevent subdomain takeovers
A subdomain takeover is a common network security threat that allows attackers to hijack traffic to your services or take over your domain. Detecting these…
Ivanti patches two more Connect Secure zero-days chained in attacks
Ivanti released security updates to patch two more Connect Secure (ICS) remote access gateway flaws that have been chained in zero-day attacks since at least…
Hackers Use CyberStrikeAI Agents to Automate Windows Domain Takeovers and Credential Theft
Hackers are now using an AI-driven command framework called CyberStrikeAI to break into Windows networks and take over entire domains. Education organizations in Africa and…
Hundreds of Mundane AI Apps Are Hiding Sexually Abusive Deepfake Features
At first glance, the self-proclaimed “pet portrait” app Viefur appears to be just another AI slop generator. Using digital coins sold in the app—around $4…
11 Best Security Data Lake Platforms (2026 Buyer’s Guide)
Security Data Lake Platforms The security data lake decision is a custody decision: who owns your telemetry bytes, in what format, queryable by whose engines,…
DeepSeek open-sources Super-Agent, a coding agent that watches team chats for work
Deepseek released a research prototype of dsh-superagent, a coding agent that does work on a GitHub repository for you. Who can ask for work The…
A week in security (October 26 – November 1)
Last week on Malwarebytes Labs: Fake PDF and search tools hijacked searches for 13.4 million Chrome users Photo ID, bank checks, face scan? The UK’s…
New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value
Cybersecurity researchers have discovered a new Windows infostealer malware called VOLTA-AUTODOXER (aka VOLTA) that makes use of a large language model (LLM) to rank a…